
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
File: hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft (raw, json)
Hash identifier: WmPNoVWTNFJR6prOPGSwMoLmwbGETwvpW++Z+qMCRK0=
Subject key identifier: A3:54:CE:A1:07:DF:6A:5B:C3:0D:97:E3:3D:9F:B0:4F:D7:28:0D:9C
Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
Certificate issuer: /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
Manifest number: DE
Signing time: Fri 13 Nov 2026 06:43:58 +0000
Manifest this update: Fri 13 Nov 2026 06:43:57 +0000
Manifest next update: Fri 20 Nov 2026 06:43:57 +0000
Files and hashes: 1: hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl (hash: /JlbHsiZXui+kOeLHQyDbtjuwEQwXG7DXFM4L/e6mp4=)
2: 33C3BDD69AA111F0944EF628C4F9AE02.roa (hash: pV6RrpL0HFiSkSQ3Egen1lL8OO4gLgRAAJv9sHZbodQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 06:43:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Validity
Not Before: Nov 13 06:43:57 2026 GMT
Not After : Nov 20 06:43:57 2026 GMT
Subject: CN=6af6b1ae-7c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d3:56:30:0a:cd:9d:dc:75:3d:29:9c:2c:68:
f6:05:b4:1f:9c:aa:b6:cc:47:17:c1:3d:8d:ac:ed:
ed:bf:cf:bd:e4:15:2b:21:5c:89:96:84:1e:8e:c0:
36:c2:ea:10:f8:29:d9:b7:85:6c:b8:7b:b2:a9:f2:
71:7a:bd:85:42:d9:2f:a9:36:c3:3c:ba:e6:de:e1:
ca:eb:33:02:83:4c:50:16:6a:d9:c9:c2:a7:8c:bf:
ba:46:23:3e:ad:6b:d4:98:b8:11:1b:90:81:83:ea:
1c:7f:69:47:69:f6:a6:a3:f8:e1:75:63:e0:fe:37:
7e:e6:1a:1f:eb:f9:0f:e5:a3:ec:52:2a:42:4d:d8:
97:68:30:5b:14:f1:1d:da:95:ba:1b:4c:ce:4f:39:
de:4f:b1:83:d8:e9:14:af:bc:8d:f0:84:ba:62:b3:
d2:fb:cd:6e:89:56:61:0d:12:eb:36:13:ad:e6:a1:
88:f9:a6:22:4e:22:3b:3b:15:0e:1b:2f:08:d6:ad:
40:34:66:e8:84:88:da:fc:86:5c:5a:c3:ca:09:5b:
bb:74:bb:24:b8:9b:f6:eb:2b:b9:7d:93:ab:1a:6c:
b1:68:9a:f4:00:cf:3d:80:d4:87:a0:90:be:69:0f:
32:70:e1:93:ef:3c:b4:99:6b:2c:10:73:25:93:5d:
95:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:54:CE:A1:07:DF:6A:5B:C3:0D:97:E3:3D:9F:B0:4F:D7:28:0D:9C
X509v3 Authority Key Identifier:
keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:99:e3:cc:8c:3c:60:71:9d:66:41:5c:0a:85:36:6c:94:d7:
24:a5:20:55:7f:10:bb:c9:43:b4:06:bf:c5:ce:fa:9a:ac:b4:
c2:5c:24:f2:a6:c1:90:64:8d:64:d3:1e:b7:81:d4:e7:37:eb:
a4:d1:25:3f:0b:30:4a:fc:d6:1e:6d:6d:bd:70:2f:0e:50:da:
16:1d:e6:36:67:5a:ff:4a:dd:53:be:ba:33:22:12:7e:98:d2:
2f:32:c3:af:c2:bb:78:72:ab:02:11:45:98:18:b1:da:6b:75:
cc:cc:f3:10:cc:64:92:56:cc:de:b7:09:7f:d9:8b:15:c2:5b:
7b:78:2f:67:bf:b6:ac:53:44:85:71:f4:a4:89:e0:a0:79:2f:
8d:2e:8d:a7:72:66:63:82:d8:99:50:83:51:64:32:03:bb:08:
ec:b2:7b:ec:2b:67:fa:c3:ab:67:2a:16:19:ce:b3:6e:bc:fa:
b6:00:15:5b:62:a6:ee:70:7a:b0:89:87:93:cb:94:4f:24:10:
41:02:d8:e5:f0:3f:a6:7b:93:f3:74:d7:80:bc:8b:bf:57:d5:
3c:80:3e:9a:e1:a2:e6:04:0e:47:2a:cd:72:72:49:cc:3e:8d:
f1:60:71:95:76:f2:0a:af:35:53:57:e8:c7:7d:b2:d1:8b:54:
cd:26:dc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:03:03 2026 by rpki-client